smokeloader | 391e57083b6f4248eefc55aeb270b12f337e49f1f72d3b0904d6e56b8ebba2bd | Triage

Sharing

General

Target

391e57083b6f4248eefc55aeb270b12f337e49f1f72d3b0904d6e56b8ebba2bd
Size

226KB
Sample

221017-cffqcsaeej
MD5

7ec254f99c0cd555e7f9eb1a3a07a47c
SHA1

dd93536caf74b631948051a0fef0f91793a7ce77
SHA256

391e57083b6f4248eefc55aeb270b12f337e49f1f72d3b0904d6e56b8ebba2bd
SHA512

53882813d28b800b3cc071107c717eda414612553217dbf9ccfad2b3a7dc15b763da2761a561a88f4d13ba372baada639e53c4342be60409e8b5c46695d6d10e
SSDEEP

6144:2yC/Df4LjFRRP7O8mijRQc0iA8s0GbiSKHuSs:2y+f4HF3PS8mwRQ2ZIcH

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  391e57083b6f4248eefc55aeb270b12f337e49f1f72d3b0904d6e56b8ebba2bd
- Size
  
  226KB
- MD5
  
  7ec254f99c0cd555e7f9eb1a3a07a47c
- SHA1
  
  dd93536caf74b631948051a0fef0f91793a7ce77
- SHA256
  
  391e57083b6f4248eefc55aeb270b12f337e49f1f72d3b0904d6e56b8ebba2bd
- SHA512
  
  53882813d28b800b3cc071107c717eda414612553217dbf9ccfad2b3a7dc15b763da2761a561a88f4d13ba372baada639e53c4342be60409e8b5c46695d6d10e
- SSDEEP
  
  6144:2yC/Df4LjFRRP7O8mijRQc0iA8s0GbiSKHuSs:2y+f4HF3PS8mwRQ2ZIcH
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Deletes itself
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan